Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
File: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft (raw, json)
Hash identifier: U6t77U8CZO8Hhll1MepxOeY1I88WWloRLIlS4aNWyXI=
Subject key identifier: E1:24:AA:3B:13:C5:C5:CD:FF:08:6F:C1:EB:84:1F:AD:CC:6E:C3:FA
Authority key identifier: 4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
Certificate issuer: /CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Certificate serial: 019D284DA0BF5D7FB2843AFBF45AED06ABCF
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
Manifest number: 07D6
Signing time: Thu 26 Mar 2026 04:01:09 +0000
Manifest this update: Thu 26 Mar 2026 04:01:09 +0000
Manifest next update: Fri 27 Mar 2026 04:01:09 +0000
Files and hashes: 1: TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl (hash: c0+Tea7HTKrOOphG+qZel2T3+QZCyS2iZGkzVfYD438=)
2: eN5E1N2fbNIwZ9RyYdP9j32arcA.roa (hash: Vg/cG2oIlWZ3XVorMkNOVvWySOFv00wWS3oGrbEzxmU=)
3: w9YEoSGGw5FqZxEAWpHoaM4fdnU.roa (hash: +H9ZxdN0LwsnaJ4J/ES/yJYI9G3YZQK2l2602ElBkSM=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Fri 27 Mar 2026 00:00:38 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:28:4d:a0:bf:5d:7f:b2:84:3a:fb:f4:5a:ed:06:ab:cf
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=4c2a3056e6259249f466f0055bb11b83a6a30a42
Validity
Not Before: Mar 26 04:01:09 2026 GMT
Not After : Mar 27 04:01:09 2026 GMT
Subject: CN=e124aa3b13c5c5cdff086fc1eb841fadcc6ec3fa
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:23:3c:11:86:f1:be:e4:95:a1:2d:c5:30:77:
6b:95:56:ce:4e:f5:03:ba:e0:3f:b0:6a:db:bd:6d:
45:56:98:a0:b1:c5:de:48:e0:2b:b3:1f:57:96:b7:
02:c2:6b:0f:b9:86:f8:f0:42:fd:58:67:7e:77:e6:
ea:99:79:df:04:bb:66:87:5c:92:42:48:de:91:c3:
8c:45:15:1b:c5:81:83:e3:09:5e:e4:1a:e4:46:ff:
dd:9b:dc:d5:37:57:cf:ff:82:0d:7f:c3:07:3f:ed:
ce:85:54:76:82:58:a4:54:9e:80:5e:c6:34:36:45:
1f:ae:10:d2:d6:ac:d6:d5:a7:92:b6:fc:fb:f9:98:
c4:9e:e7:c0:64:f3:ee:33:83:d8:57:9a:57:36:d4:
c3:1e:b5:d1:d0:d1:f9:1a:71:a3:74:cc:e7:7f:dd:
92:be:52:61:9e:11:9d:89:70:98:67:6f:3c:bf:01:
81:2e:13:c5:ff:b7:ca:47:83:2e:f6:01:94:b8:28:
cf:5d:70:fd:df:ba:59:c4:65:2e:63:99:75:3c:2f:
37:05:38:d4:8e:85:9e:21:36:21:f9:bc:92:e0:30:
d5:f5:d1:d0:be:eb:69:63:b0:0c:c6:4c:37:4d:d2:
b2:c3:b5:19:e7:e9:f6:8a:96:39:c6:9f:12:04:2b:
c1:6f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E1:24:AA:3B:13:C5:C5:CD:FF:08:6F:C1:EB:84:1F:AD:CC:6E:C3:FA
X509v3 Authority Key Identifier:
keyid:4C:2A:30:56:E6:25:92:49:F4:66:F0:05:5B:B1:1B:83:A6:A3:0A:42
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/40/778af2-b2c0-4704-9fa2-2841013bccb4/1/TCowVuYlkkn0ZvAFW7Ebg6ajCkI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
15:c9:ec:40:8d:70:3a:55:1f:05:c2:86:c1:a0:1b:2e:1a:03:
64:61:3b:e5:c3:e6:7f:42:6b:18:d0:ad:b4:8a:37:c1:66:16:
55:53:92:ad:78:4e:f9:06:03:04:90:ac:40:44:48:4d:6c:85:
e8:9c:28:b6:c5:84:00:2f:dc:6d:b8:c3:f1:7e:a6:fb:e9:35:
ad:25:a7:59:6f:be:16:68:52:ec:66:2e:ac:d6:12:f1:99:82:
04:3f:9d:6b:aa:4d:1d:79:8a:9b:b3:1f:c4:01:23:3f:71:fc:
c5:d6:6e:7d:6b:14:4d:06:84:cb:b0:f9:f9:d4:8e:53:4b:24:
5b:80:ab:d7:aa:4a:cd:2c:da:bf:e5:f1:78:2b:56:6b:28:1c:
c0:ad:61:ee:11:27:b1:ba:b1:6c:e8:b7:e8:1a:06:28:ee:ab:
91:c0:6f:9c:42:6b:03:25:d5:4c:b7:c7:ac:b4:f2:cb:53:24:
c3:c7:62:94:28:54:db:a6:21:4e:55:c2:10:ac:f1:db:80:b5:
9a:b0:1b:73:16:71:7f:64:8e:55:04:bc:ff:66:59:f3:ab:13:
a4:25:08:af:8f:a9:e1:6e:75:5c:24:e8:88:c0:56:73:5b:78:
20:72:68:a8:9d:f5:94:b9:75:69:da:a6:1c:95:86:0a:2c:05:
88:20:42:3c
-----BEGIN CERTIFICATE-----
MIIFFjCCA/6gAwIBAgISAZ0oTaC/XX+yhDr79FrtBqvPMA0GCSqGSIb3DQEBCwUA
MDMxMTAvBgNVBAMTKDRjMmEzMDU2ZTYyNTkyNDlmNDY2ZjAwNTViYjExYjgzYTZh
MzBhNDIwHhcNMjYwMzI2MDQwMTA5WhcNMjYwMzI3MDQwMTA5WjAzMTEwLwYDVQQD
EyhlMTI0YWEzYjEzYzVjNWNkZmYwODZmYzFlYjg0MWZhZGNjNmVjM2ZhMIIBIjAN
BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAoCM8EYbxvuSVoS3FMHdrlVbOTvUD
uuA/sGrbvW1FVpigscXeSOArsx9XlrcCwmsPuYb48EL9WGd+d+bqmXnfBLtmh1yS
QkjekcOMRRUbxYGD4wle5BrkRv/dm9zVN1fP/4INf8MHP+3OhVR2glikVJ6AXsY0
NkUfrhDS1qzW1aeStvz7+ZjEnufAZPPuM4PYV5pXNtTDHrXR0NH5GnGjdMznf92S
vlJhnhGdiXCYZ288vwGBLhPF/7fKR4Mu9gGUuCjPXXD937pZxGUuY5l1PC83BTjU
joWeITYh+byS4DDV9dHQvutpY7AMxkw3TdKyw7UZ5+n2ipY5xp8SBCvBbwIDAQAB
o4ICIjCCAh4wHQYDVR0OBBYEFOEkqjsTxcXN/whvweuEH63MbsP6MB8GA1UdIwQY
MBaAFEwqMFbmJZJJ9GbwBVuxG4OmowpCMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF
BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv
c2l0b3J5L0RFRkFVTFQvVENvd1Z1WWxra24wWnZBRlc3RWJnNmFqQ2tJLmNlcjCB
jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu
bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80MC83NzhhZjItYjJjMC00NzA0LTlmYTIt
Mjg0MTAxM2JjY2I0LzEvVENvd1Z1WWxra24wWnZBRlc3RWJnNmFqQ2tJLm1mdDCB
gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv
cnkvREVGQVVMVC80MC83NzhhZjItYjJjMC00NzA0LTlmYTItMjg0MTAxM2JjY2I0
LzEvVENvd1Z1WWxra24wWnZBRlc3RWJnNmFqQ2tJLmNybDAYBgNVHSABAf8EDjAM
MAoGCCsGAQUFBw4CMCEGCCsGAQUFBwEHAQH/BBIwEDAGBAIAAQUAMAYEAgACBQAw
FQYIKwYBBQUHAQgBAf8EBjAEoAIFADANBgkqhkiG9w0BAQsFAAOCAQEAFcnsQI1w
OlUfBcKGwaAbLhoDZGE75cPmf0JrGNCttIo3wWYWVVOSrXhO+QYDBJCsQERITWyF
6JwotsWEAC/cbbjD8X6m++k1rSWnWW++FmhS7GYurNYS8ZmCBD+da6pNHXmKm7Mf
xAEjP3H8xdZufWsUTQaEy7D5+dSOU0skW4Cr16pKzSzav+XxeCtWaygcwK1h7hEn
sbqxbOi36BoGKO6rkcBvnEJrAyXVTLfHrLTyy1Mkw8dilChU26YhTlXCEKzx24C1
mrAbcxZxf2SOVQS8/2ZZ86sTpCUIr4+p4W51XCToiMBWc1t4IHJoqJ31lLl1adqm
HJWGCiwFiCBCPA==
-----END CERTIFICATE-----
Generated at Thu Mar 26 09:56:31 2026 by rpki-client